fix: update e2e tests for current UI, increase timeouts for CPU environments, and fix auth bypass bug

- Fix SKIP_MUST_CHANGE_PASSWORD not affecting login/session API responses,
  causing frontend redirect even when the env var was set after user creation
- Increase Docker Playwright timeouts (test: 600s, expect: 60s, AI processing: 300s)
  to support CPU-only self-hosted environments
- Increase default rate limit from 100 to 50000 req/min for self-hosted deployments
- Fix OCR tests: use filechooser pattern (Dropzone has no static file input),
  correct enhance checkbox default, rewrite for actual fixture behavior
- Fix remove-bg tests: update quality labels (Balanced→HD, Best→Max)
- Fix noise-removal skip guard: use waitFor() instead of instant isVisible()
- Fix automate pipeline save test: clean up stale E2E pipelines before assertion

apps/api/src/plugins/auth.ts

@@ -207,7 +207,7 @@ export async function authRoutes(app: FastifyInstance): Promise<void> {
           id: user.id,
           username: user.username,
           role: user.role,
-          mustChangePassword: user.mustChangePassword,
+          mustChangePassword: env.SKIP_MUST_CHANGE_PASSWORD ? false : user.mustChangePassword,
           permissions: getPermissions(user.role as "admin" | "user"),
           teamName: teamRow?.name ?? user.team,
         },
@@ -255,7 +255,7 @@ export async function authRoutes(app: FastifyInstance): Promise<void> {
         id: user.id,
         username: user.username,
         role: user.role,
-        mustChangePassword: user.mustChangePassword,
+        mustChangePassword: env.SKIP_MUST_CHANGE_PASSWORD ? false : user.mustChangePassword,
         permissions: getPermissions(user.role as "admin" | "user"),
       },
       expiresAt: session.expiresAt.toISOString(),